Pricing / Corridor
Local mode is free and shipped. The tier structure above it is settled — Free, Pro, Premium, Max, Team, and Enterprise, with trust and provenance never behind the paywall. The numbers are not settled, so they are printed here as a planning reference and nothing more. Managed-cloud pricing stays deliberately dark until unit economics pass.
The shape of the offer is decided and worth stating plainly. What is not decided is what each tier costs, so every figure below is labelled as the planning input it is — taken from the economics model, not from a price list.
€0
Available now
The full local runtime, with no account and no egress. This tier is not a trial of the product — it is the product, running on your machine.
$19/dev/mo billed annually · $24 monthly
Planning reference · not committed
One developer, many machines. Adds the hosted spine — cross-device resume and managed retention above the local limits. Hosted Lens is planned but not built; when it ships it adds lexical, structural, and semantic recall.
~$79 / dev / mo
Planning reference · not committed
Graph memory, multi-project continuity, and higher ceilings. The Premium headline is the evidence graph — not Art.50 export and not isolation.
~$149 / dev / mo
Planning reference · not committed
The flagship individual tier. generous monthly credits, generous storage, and max model access — the named volume lane for heavy users, still on the shared cell.
~$79 / seat / mo
Planning reference · not committed
Shared, reviewed memory across a team, with tenancy isolation adversarially tested before any external user exists. The differentiator here is governance, not throughput.
Custom
Planning reference · not committed
Dedicated infrastructure, custom terms, BYOK, and data residency — only after managed cloud is evidenced. Negotiated, not self-serve.
Trust is not an upsell. Receipts, abstention, signature verification, and immutable scope binding are in the Free tier and stay there. Paid tiers buy hosting, sharing, and scale — never the ability to tell whether a claim is true.
Figures are planning references from the economics model, not committed pricing.
Build from source on your machine and you get the core evidence graph, the eight-tool MCP contract, and the TrustBench deterministic suite. This is the free tier as it actually exists — not a feature-limited preview of something better.
SQLite + sqlite-vec evidence graph, 23 MCP tools, and the TrustBench deterministic suite — all running on your machine, with no account and no egress.
5 indexed sources · 100 daily retrievals · 1 seat
Handoff packets, session continuity, and adapters for Claude Code and Cursor. Move between agents without re-teaching the project.
Continuity Format v1 · Ed25519-signed
Build from source, open GitHub issues, and follow the public docs. No SLA, no ticket queue, no managed backplane.
Discord / GitHub · no SLA
Free tier: €0. Local limits are 5 indexed sources, 100 daily retrievals, 1 seat. Source: PRICING-AND-METERING.md §1.1.
A comparison table that only says which tier a feature belongs to is half the truth. This one also says whether the feature exists. Six rows are shipped, one is evolving, and seven are planned — and the planned rows are listed here rather than quietly omitted.
| Capability | State | Free | Pro | Premium | Max | Team | Enterprise |
|---|---|---|---|---|---|---|---|
| Local evidence graph | Shipped | Full | Full | Full | Full | Full | Full |
| Signed handoff between tools | Shipped | Full | Full | Full | Full | Full | Full |
| Provenance, receipts, abstention | Shipped | Full — never gated | Full — never gated | Full — never gated | Full — never gated | Full — never gated | Full — never gated |
| Scope admission and Trust Firewall | Shipped | Full — never gated | Full — never gated | Full — never gated | Full — never gated | Full — never gated | Full — never gated |
| TrustBench deterministic suite | Shipped | Runs locally | Runs locally | Runs locally | Runs locally | Runs locally | Runs locally |
| Revalidation on source change | Anchors shipped · full ref DAG in progress | Anchors resolved | Anchors resolved | Anchors resolved | Anchors resolved | Anchors resolved | Anchors resolved |
| Cross-device sync | Planned | Not included | Included | Included | Included | Included | Included |
| Hosted Lens code intelligence | Planned | Not included | Planned | Planned | Planned | Planned | Planned |
| Premium and max model access | Planned | Not included | Balanced | Balanced + premium | Max + consensus | Max + consensus | Custom models |
| DevPods (compute tokens) | Planned | Not included | Pay-per-use | Pay-per-use | Included quota | Included quota | Included |
| Team-scoped shared recall | Planned | Not included | Not included | Not included | Not included | Included | Included |
| Collaborative review queue | Planned | Not included | Not included | Not included | Not included | Included | Included |
| Organization policy and audit export | Planned | Not included | Not included | Not included | Not included | Included | Included |
| Dedicated database and BYOK | Planned | Not included | Not included | Not included | Not included | Not included | Included |
“Not included” on a planned row means two things at once: the capability is not in that tier, and it is not in any tier yet. Both are worth knowing before you plan around it.
Managed-cloud pricing remains dark because the required evidence is not yet in. Partner pricing is not evidenced. Live Qdrant capacity is not evidenced. The infrastructure costs in the model are planning estimates, not invoices.
The corridor beside this paragraph is an internal reference from UNIT-ECONOMICS.md. It exists to size the next evidence run — how much capacity to buy, how much usage to model, what break-even would have to look like. It is not an offer, a quote, or a promise, and the moment it is treated as one it stops being useful for the thing it was built for.
When the economics gates flip to GO, the price is published together with the evidence that produced it. Until then this page carries no committed prices, and there is nothing here to sign up for.
PRODUCT-DESIGN.md §7 · UNIT-ECONOMICS.md §8 · ADR-021
Planning reference only. Not committed pricing. These are planning estimates from UNIT-ECONOMICS.md. They must not be represented as committed pricing.
Managed-cloud invitations are blocked today. The beta opens only when every gate below has reviewed evidence at the same commit. If any gate is STOP or NOT EVALUATED, the decision is STOP — one green gate does not carry the other three.
Cohort demand, trust, provenance, and willingness-to-pay signals pass the readiness rubric.
Live managed/Qdrant capacity evidence and zero-leak hard stop, per the approved benchmark contract.
Measured usage, invoices, provider costs, reservation/settlement evidence, and enforceable limits.
Current security review green: auth-before-filtering, Postgres reauthorization, and no cross-tenant leak.
No public signup, no self-serve billing. Access is invitation-only, and only after all four gates pass.
These are the planned capabilities that would justify a paid tier. Each one requires evidence before it ships, and none of them takes anything away from local mode — the free runtime keeps working with the network removed.
Cloud-first code intelligence: lexical, structural, semantic, and repo-graph queries shared across tools and teammates.
designed in the Lens cluster; not built
Shared memory, cross-device sync, collaborative review, and team-scoped recall on a managed backplane.
gated on the ADR-010 tenancy gate
Dedicated infrastructure, custom models, SAML/OIDC posture, and negotiated service terms — only after managed cloud is evidenced.
out of managed-beta scope
All managed-cloud capabilities are planned. No ship date is committed. Source: MANAGED-BETA-SCOPE.md.
Including the uncomfortable ones. A pricing page that only answers the easy questions is answering a different page's questions.
Clone the repo, build from source, and run the TrustBench suite on your own machine. Nothing on this page has to resolve before you can use the product.